refactor api views inter their respecting apps

src/c3nav/mapdata/permissions.py

@@ -0,0 +1,26 @@
+from django.conf import settings
+from django.utils.translation import ugettext_lazy as _
+from rest_framework.exceptions import PermissionDenied
+from rest_framework.permissions import BasePermission
+
+from .models import Source
+
+
+def get_unlocked_packages(request):
+    return set(settings.PUBLIC_PACKAGES) | set(request.session.get('unlocked_packages', ()))
+
+
+def can_access_package(request, package):
+    return settings.DEBUG or package.name in get_unlocked_packages(request)
+
+
+def filter_source_queryset(request, queryset):
+    return queryset if settings.DEBUG else queryset.filter(package__name__in=get_unlocked_packages(request))
+
+
+class LockedMapFeatures(BasePermission):
+    def has_object_permission(self, request, view, obj):
+        if isinstance(obj, Source):
+            if not can_access_package(request, obj.package):
+                raise PermissionDenied(_('This Source belongs to a package you don\'t have access to.'))
+        return True